Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/d8Ubh0CXhXXhagmmKA6YqgiY1CI.roa
File: d8Ubh0CXhXXhagmmKA6YqgiY1CI.roa (raw, json)
Hash identifier: XS7bGpIqru665bj8O0eStPb/SWXWzyB/RG2r/OA2+68=
Subject key identifier: 77:C5:1B:87:40:97:85:75:E1:6A:09:A6:28:0E:98:AA:08:98:D4:22
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 019425FDA4BF8DDC57200DD23C668594808D
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/d8Ubh0CXhXXhagmmKA6YqgiY1CI.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44489
IP address blocks: 93.91.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a4:bf:8d:dc:57:20:0d:d2:3c:66:85:94:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77c51b8740978575e16a09a6280e98aa0898d422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9d:a6:3a:59:3b:75:bf:66:4f:5f:7d:8f:f4:
a2:50:fe:97:34:38:83:8e:25:ab:07:87:d6:02:26:
d1:88:36:04:78:23:88:2b:e4:1d:b6:a4:cb:cf:a7:
aa:1e:90:03:97:1d:79:a2:8b:d4:a8:94:ea:d2:cc:
71:61:de:40:c8:a2:e0:53:27:52:8f:3a:04:a6:b5:
76:29:12:c3:05:4b:6a:06:34:b3:76:b0:30:2c:1d:
1b:1e:31:d7:d1:fe:6b:55:56:15:30:c1:93:9d:1e:
34:01:be:60:b9:c1:f2:2a:43:2a:04:c4:1c:d7:16:
6a:62:9e:3c:06:4b:8d:4a:90:e2:9e:68:e3:11:83:
43:21:08:f1:40:0e:cc:87:56:97:bf:89:00:aa:ce:
d3:38:2b:e8:6a:4e:d2:34:54:5a:0b:22:ab:11:9c:
46:c7:46:60:d7:42:56:c6:1b:73:bf:12:72:e1:fd:
f0:af:9f:84:d1:c7:24:3f:6b:91:3f:6d:92:53:3f:
71:b9:e3:af:6c:68:16:b3:91:6e:2b:1b:d4:71:1f:
69:64:9a:df:69:58:62:6e:bf:87:be:4f:91:89:91:
79:f7:96:7b:dc:ce:94:c7:f4:14:31:dc:95:d5:cc:
fc:6e:f5:3d:24:84:56:86:74:ad:67:be:d0:10:36:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C5:1B:87:40:97:85:75:E1:6A:09:A6:28:0E:98:AA:08:98:D4:22
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/d8Ubh0CXhXXhagmmKA6YqgiY1CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.48.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:5f:4a:60:ae:46:98:28:13:50:73:da:58:70:15:d1:b5:c9:
82:a6:34:27:9e:31:cb:0c:42:c7:0b:ce:c4:9a:95:6b:ba:a1:
4b:25:39:26:09:4d:f8:2a:2f:e3:61:27:e5:2d:be:0e:d2:2c:
0a:92:8a:2f:a7:8a:58:51:b9:8c:b4:df:4f:3f:2b:81:54:cf:
21:a8:6c:dd:15:ad:26:00:6d:f1:99:e3:39:8d:6f:5e:08:33:
9a:d2:d8:53:c4:6e:3f:8e:92:34:16:35:b7:32:d3:8a:cb:67:
c3:ab:83:71:41:ef:12:3b:93:1d:12:a0:79:85:59:fd:83:65:
5b:dd:ba:aa:b4:21:94:58:95:0b:54:ff:7c:91:6d:57:9f:69:
1f:f8:e5:45:f2:ba:02:e0:61:87:4b:f1:97:4d:72:f0:ce:bf:
56:b5:7f:e2:34:d2:9a:67:77:70:4c:9b:fa:83:76:bd:9c:0e:
a6:79:6f:f3:1e:62:c3:3e:19:2f:2b:dc:5d:07:44:39:37:58:
51:0c:0e:37:7a:fc:f6:e7:a9:a9:3e:d7:7c:5e:71:69:06:cc:
33:a7:1c:f0:dc:6f:26:7b:fc:c3:3b:85:92:d4:95:46:a3:a8:
99:3c:9a:e1:f0:7c:55:28:d8:7b:1f:e6:d2:f7:93:f1:9c:db:
72:c4:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:33 2025 by rpki-client